AID-493 Always set Vary: Origin for apps using this middleware.
AID-493 Set Vary: Origin on response, not request. Handle existing Vary headers.
AID-493 Added missing return statement.